Hi,

When using PowerDNS for DNSSEC, is there any way to configure the
validity period of the RRSIG records to be greater than the default 2 weeks?
If not, what is the recommended value for the SOA expire field for
DNSSEC enabled zones (I understand it is best to set it to something
less than the RRSIG validity period to avoid signatures expiring before
a zone expires if a slave has connectivity problems with its master)

Thanks,
Martin
-- 
 Cellular phone : 080-4359-8579
 e-mail:mchand...@aventer.net
 URL   :http://www.aventer.net/

_______________________________________________
Pdns-users mailing list
Pdns-users@mailman.powerdns.com
http://mailman.powerdns.com/mailman/listinfo/pdns-users

Reply via email to